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CAUTION CAUTION 


Disconnect power before To ensure reliable operation and to prevent overheating, 


servicing. provide adequate ventilation for this modem and keep it 
away from heat sources. Do not locate near heat registers 


or other heat-producing equipment. Provide for free air 
This device is intended for 


flow around the Wireless Gateway and its power supply. 


indoor operation only. 
Telephone jacks Line | and 


Line 2 must not be connected 


to outside wiring. 


RoHS 


This symbol on the product ensures that the device complies with European legislation, Directive 89/336/EEC, 
73/23/EEC, 93/68/EEC, which covers the EMC (electromagnetic compatibility), and safety aspects of marking. 


This symbol means that your inoperative electronic appliance must be collected separately and not mixed with the 
household waste. The European Union has implemented a specific collection and recycling system for which 
producers’ are responsible. 


This appliance has been designed and manufactured with high quality materials and components that can be recycled 
and reused. Electrical and electronic appliances are liable to contain parts that are necessary in order for the system to 
work properly but which can become a health and environmental hazard if they are not handled or disposed of in the 
proper way. Consequently, please do not throw out your inoperative appliance with the household waste. 


If you are the owner of the appliance, you must deposit it at the appropriate local collection point or leave it with the 
vendor when buying a new appliance. 


- If you are a professional user, please follow your supplier's instructions. 
- If the appliance is rented to you or left in your care, please contact your service provider. 


Help us protect the environment in which we live! 
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NORTH AMERICAN CABLE INSTALLER: 

This reminder is provided to call your attention to Article 820-40 of the National Electrical Code (Section 54 
of the Canadian Electrical Code, Part 1) which provides guidelines for proper grounding and, in particular, 
specifies that the cable ground shall be connected to the grounding system of the building as close to the 
point of cable entry as practical. 


Operating Information 
Operating Temperature: 0° - 40°C (32° - 104° F) 


Storage Temperature: -20° to 70°C (-4° — 157° F) 


If you purchased this product at a retail outlet, please read the following: 


Product Information 
Keep your sales receipt to obtain warranty parts and service and for proof of purchase. Attach it here and 
record the serial and model numbers in case you need them. The numbers are located on the back of the 


product. 
Model No. Serial No 
Purchase Date: Dealer/Address/Phone: 
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Safety Recommendations 


REMEMBER SAFETY FIRST 
Using equipment safely 


Your Cable Modem has been manufactured to meet safety standards, but you must take care if you want it to 
perform properly and safely. 


It is important that you read this booklet completely, especially the safety instructions below. If you have 
any doubts about the installation, operation or safety of decoder, please contact your supplier. 


To avoid the risk of electric shock 


e Disconnect the Cable Modem from the mains supply before you connect the Cable Modem to (or 
disconnect it from) any other equipment. Remember that contact with 110 Volt AC mains can be lethal 
or cause severe electric shock. 


e Never remove the Cable Modem’s cover. Should the Cable Modem fail, contact the Customer Service to 
arrange repair or service. 


e Never allow anyone to push anything into holes, slots or any other opening in the case 
e Do not block the Cable Modem’s ventilation slots; never stand it on soft furnishings or carpets 


e Do not put anything on the Cable Modem which might spill or drip into it (eg. Lighted candles or 
containers of liquids). Do not expose the Cable Modem to dripping or splashing. If an object or liquid 
enters inside the Cable Modem, unplug it immediately and contact the Customer Service. 


e Do not store the Cable Modem in excessively hot, cold or damp conditions. The Cable Modem is 
intended to operate at an ambient temperature of less than 40 degrees Celsius and a maximum humidity 
level of 75%. In case of a storm, it is recommended that you unplug the Cable Modem from the mains 
and from the TV set. 


e Leave the mains socket accessible so that you can unplug the set quickly 


Connecting to the mains supply 

e This Cable Modem is designed to operate at 100 ~ 240 VAC. 

e If you are in any doubt about the mains lead, the plug or connection, please consult the Customer Service. 
e Only the power adapter supplied with the decoder has to be used 


Ensuring optimum performance 
e Leave 7cm to 10cm around the Cable Modem to ensure that proper ventilation gets to the Cable Modem. 
e Do not store your Cable Modem on its side (if not allowed) 


e To clean the Cable Modem, use a dry, clean soft cloth with no cleaning solvent or abrasive products. 
Clean the ventilation openings regularly. 
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MAIN TECHNICALSPECIFICATIONS 


General 
Operating voltage 100 ~ 240 VAC 
Typical Power consumption | 18W max 
Dimensions (W x H x D) 220mm x 166.7mm x 43mm 
Operating temperature range | 0 — 40 °C 
Storage temperature range -20 — 70 °C 
AC adapter (or plug-in ADAPTER 18W 12VDC/1.5A 
adapter) type 
Connections 
DC input 12V/ 1.5A 
Cable input 1xCoaxial cable connector 
Ethernet plugs 4xRJ-45 


«4 This symbol on your set guarantees that your product complies with the European Directives 1999/5/ECand 


2009/125/EC on Safety, Telecom, Electromagnetic Compatibility and Energy related Products. 


The Lightning Flash with arrowhead symbol within an equilateral triangle, is intended to alert 
/\ the user to the presence of uninsulated "dangerous voltage" within the product enclosure that 


may be of sufficient magnitude to constitute a risk of shock to persons. 


The exclamation point within an equilateral triangle is intended to alert the user to the presence 
J of important operating and maintenance (servicing) instructions in the literature accompanying 


the product. 
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CHAPTER 1: CONNECTIONS AND SETUP 


Turning on the Wireless Gateway 


If there is no lighted LEDs on the front panel, check the power adapter plug-in the power jack and connect to 
CM correctly. 


After installing the Wireless Gateway and turn it on for the first time (and each time the modem is 
reconnected to the power), it goes through several steps before it can be used. Each of these steps is 
represented by a different pattern of flashing lights on the front of the modem. 


Note: All indicators flash once before the initialization sequence. 


If both DS and US LEDs are flashing, it means the Wireless Gateway is automatically updating its system 
software. Please wait for the lights to stop flashing. Do not remove the power supply or reset the Wireless 
Gateway during this process. 


Introduction 


Wireless Gateway Features 


Full Band Capture Front End 

Increases performance with 50% increase in CPU speed. 

Adds Applications CPU to run Linux applications. 

Lowers Power with Advanced Power Management 

Advanced Processor architecture. 

High-Speed Memory architecture. 

Integrated IPTV solution. 

Excentis DOCSIS 1.0/1.1/2.0/3.0 Standard Compliant. 

Support Multiple Provisioning Mode. 

Four Standard RJ-45 connector for 10/100/1000BaseT Ethernet with auto-negotiation and MDIX 
functions; Support maximum Ethernet cable length up to 100m (Category 5). 

56 bits DES and 128 bits AES data encryption security. 

SNMP network management support. 

802.11 b/g/n supported, 20/40Mhz bandwidth, 300Mbps Maximum data rate. 

BCM43227 support 2.4Ghz only. 

Support Web pages and private DHCP server for status monitoring. 

Propane™ technology supported, enabling the connection of more Internet users without additional 
network bandwidth. 

Plug and Play. 
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What’s on the CD-ROM 


Insert the Wireless Gateway CD-ROM into your CD-ROM drive to view troubleshooting tips, the internal 
diagnostics, and other valuable information. 


CD-ROM Contents: 
e Electronic copy of this user’s guide in additional languages (PDF format) 


e Adobe Acrobat Reader — application you can load to read PDF format, if you don’t have it loaded 
already 


e Links to Technicolor web site 


DOCSIS are trademarks of Cable Television Laboratories, Inc. 


Computer Requirements 

For the best possible performance from your Wireless Gateway, your personal computer must meet the 
following minimum system requirements (note that the minimum requirements may vary by cable 
companies): 


IBM PC COMPATIBLE MACINTOSH** 
CPU Pentium preferred PowerPC or higher 
System RAM 16MB (32MB preferred) 24MB (32MB preferred) 
Operating System Windows* NT /2000/Me/XP/ Mac OS** 7.6.1 or higher 
Vista / Windows 7, Linux 
Video VGA or better (SVGA preferred) | VGA or better (SVGA built-in preferred) 
CD-ROM Drive Required Required 
Ethernet 10BaseT , 100BaseT or 1O0O0BaseT 10BaseT , 100BaseT or 1000BaseT 


An Ethernet card makes it possible for your computer to pass data to and from 
the internet. You must have an Ethernet card and software drivers installed in 
your computer. You will also need a standard Ethernet cable to connect the 
Ethernet card to your Wireless Gateway. 


Software e A TCP/IP network protocol for each machine 


e Microsoft Internet Explorer 4.0 or later or 
Netscape Navigator 4.0 or later. 


* Windows is a trademark of Microsoft Corporation. 


*** Macintosh and the Mac OS are trademarks of Apple Computer, Inc. 
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Wireless Gateway Overview 


Front Panel 


The following illustration shows the front panel: 


DS US Online “-——— Ethemet ———— Wireless 


ee, 
i 


Fig. 1-1 Front Panel 
0) POWER - Indicates the Power status. 


DS - Indicates the status of Data reception by the cable modem from the Network (Downstream 
Traffic). 


—_ 


US - Indicates the status of Data transmission by the cable modem to the Network (Upstream 
Traffic). 


Q 


Online - Displays the status of your cable connection. The light is off when no cable connection is 


detected and fully lit when the modem has established a connection with the network and 
data can be transferred. 


w= = Ethernet - Indicates the state of Ethernet ports. 


Wireless - Indicates the traffic on the wireless network. 
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The lights on the front panel LEDs are described in the table below (from left to right): 
ON = the LED is light, OFF = the LED is gray, FLASH = the LED is blinking. 


Internet Ethernet 
Wireless Description 
US 
ON ON ON ON 
ON ON ON ON xX Power on 0.25 sec 
ON 0.25 second 
Boot-up SEPT PEAT? 
: ON FLASH | FLASH | FLASH X X xX X x From power ON to system initialization complete 
Operation 
ON ON ON Following system initialization complete to (before) 
ON X X xX xX xX ; 
DS scanning 
1 second 
ON FLASH X X xX xX Xx During DS scanning and acquiring SYNC 
From SYNC completed, receiving UCD to ranging 
ON ON FLASH X X xX xX X completed 
DOCSIS During DHCP, configuration file download, 
Start-up registration, and Baseline Privacy initialization: 
Operation - mn ae |e . ‘ . x ‘ DHCP status: 1 second ON and 1 second OFF, 
TFTP status: 0.25 second ON and 0.25 second OFF 
ON ON ON ON xX xX X X X Operational (NACO=ON) 
ON FLASH | FLASH X X xX xX X Operational (NACO=OFF) 
Wait registration with all DS and all US — Lights 
FLASH | FLASH | FLASH | FLASH X xX X X X Flash sequentially from the right to left Minimum 
duration 3 seconds 
From 1 to 4 DS, from 1 to 4 LEDs are ON 
Channel 
X xX xX xX xX X X xX From 5 to 8 DS, From 1 to 4 LEDs are flashing 
Bonding 
Operation Duration 3 seconds 
X X X X X xX xX X From 1 to 4 US, from 1 to 4 LEDs are ON. 
Wait registration with all DS and all US — Lights 
Eat | Seat eae . - ‘ a a Flash sequentially from the left to right 
ON ON ON ON X X xX xX X MTA DHCP 
MTA 
eet: ON ON ON ON x Xx x x X  |MTASNMP/TFTP 
initialization 
ON ON ON ON X X xX xX X RSIP for NCS/Register for SIP 
CPE ‘ F 
anerion ON xX xX xX ON ON ON ON ON Ethernet / Wireless Link 
p FLASH | FLASH | FLASH | FLASH | FLASH _ |TX/RX Ethernet / Wireless Traffic 
ON Both Lines On-Hook 
MTA ON Tell Off-hook, Tel2 On-hook 
0 4 <CM Normal Operation> 
Coa §6ON Tell On-hook, Tel2 Off-hook 
ON Both Lines Off-Hook 
SW Bownload ON FLASH | FLASH | ON x x X X X A software download and while updating the 
Operation FLASH memory 


Table 1-1 LED behavior 
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Rear Panel 


Fig. 1-2 Rear Panel 


Connector Description | 
Power Jack Connector for DC12V 

Cable Connector for the cable network 

Reset To restart the modem or press over 5 seconds and modem 


will come back to factory settings. Note: some 
configurations might be lost after Reset. 
Ethernet Ethernet ports, RJ-45, 10/100/1000BaseT connector 
Table 1-2 Rear Panel description 


Side Panel for WPS 


Fig. 1-3 Side Panel 


@ WPS - Indicates the status of the WPS (Wi-Fi Protected Setup™) functionality. 


WPS button: Wi-Fi Protected Setup’. This button can be used to: 


Secure the connection with another device (PC for example) using WPS protocol. A long press on 
the button allows you to enable the association of the modem with a PC or other equipment. 


After link establish. A short press on the button, switch on/off the wireless traffic. 
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Wall Mounting 
This article will show the user through the process of wall-mounting the Wireless Gateway 


The Adapter has two wall-mount slots on its back panel. 


Two screws are needed to mount the Adapter. 


O 
O 
O 
O 
O 
O 
O 
O 
O 
O 
O 
O 


OO000 0000 0 
O000 0000 O 


OCODW00000 ON0O0O O 


OO O000 OCODDDOCO0O000 OOOO O 
900 0000 COD0D0D0N0O0OCOO OOOO O 
OO 0000 CODDDODOVOVONVNOCO ODONOON O 
CO 0000 COD0O0GHOO000O OOOO O 
O00 0000 CODOGDOOOOO OOOO O 
OO 0000 OCOD0DDCNO0O000O OOOO O 
OO 0000 OCODDDNDNO0O000 O0N0NO O 


COO000000 OOOO O 
C®O O000 OCODDDQDDQD0O0O000 ODNDOO O 


CO000000 COON O 
COO000000 OOOO O 
COO000000 O0ON0NO O 
©O000000 OOOO O 
CO000000 OOOO O 
COS800000 OOOO O 
COO000000 O00N0 O 


OOO000 OO0000 


OO O000 O000 
OO O000 0000 


To do this: 


1. 


Fig. 1-4 Wall Mounting 


Ensure that the wall you use is smooth, flat, dry and sturdy and use the 2 screw holes which 
are 101.6 mm (4 inches) apart from each other. 


Fix the screws into wall, leaving their heads 3 mm (0.12 inch) clear of the wall surface. 


Remove any connections to the unit and locate it over the screw heads. When in line, gently 
push the unit on to the wall and move it downwards to secure. 
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Relationship among the Devices 


This illustration shows a cable company that offers DOCSIS/Euro-DOCSIS compliant voice/data services. 


me 


EMTA Gateway HEED, FEES. FEEP, 


Internet 
Cable Company 
(Internet Service Provider) 


Computer, Phone, and Fax 


Fig. 1-5 Connection overview 


What the Modem Does 


The Wireless Gateway provides high-speed Internet access as well as cost-effective, commercial, and 
education subscribers on public and private networks via an existing CATV infrastructure. The IP traffic can 
transfer between the Wireless Gateway and DOCSIS/Euro-DOCSIS compliant head-end equipment. The 
data security secures upstream and downstream communications. 


What the Modem Needs to Do Its Job 


@ The Right Cable Company: Make sure your local cable company provides data services that use 
cable TV industry-standard DOCSIS/Euro-DOCSIS compliant technology. 


Check with your cable company to make sure you have everything you need to begin; they’ Il know if you 
need to install special software or re-configure your computer to make your cable internet service work for 
you. 


Contact Your Local Cable Company 


You will need to contact your cable company to establish an Internet account before you can use your 
gateway. You should have the following information ready (which you will find on the sticker on the 
gateway): 


e The serial number 

e The model number 

e The Cable Modem (CM) Media Access Control (MAC) address 

e The Terminal Adapter (EMTA) MAC address 

e Security information: Service Set [Dentifier (SSID), Encryption key / passphrase (WPA2-PSK by 


default), channel number. Default values are indicated underneath the modem on the sticker. 
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Please check the following with the cable company 
mM The cable service to your home supports DOCSIS/Euro-DOCSIS compliant two-way modem access. 


@ Your internet account has been set up. (The Media Terminal Adapter will provide data service if the 
cable account is set up but no telephony service is available.) 


@ You have a cable outlet near your PC and it is ready for Cable Modem service. 


Note: It is important to supply power to the modem at all times. Keeping your modem plugged in will keep it 
connected to the Internet. This means that it will always be ready whenever you need. 


Important Information 
Your cable company should always be consulted before installing a new cable outlet. Do not attempt any 
rewiring without contacting your cable company first. 


Please verify the following on the Wireless Gateway 
The Power LED should be lighted when plug-in the power supply. 


Connecting the Wireless Gateway to a Single Computer 


This section of the manual explains how to connect your Wireless Gateway to the Ethernet port on your 
computer and install the necessary software. Please refer to Figure 1-5 to help you connect your Digital 
Cable Modem for the best possible connection. 
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1. 


Attaching the Cable TV Wire to the Wireless Voice Gateway 
Locate the Cable TV wire. You may find it one of three ways: 
a. 


Connected to a wall-mounted cable outlet. 


jack, which should be labeled either IN, CABLE IN, CATV, CATV IN, etc. 
example. 


Connected directly to a TV, a Cable TV converter box, or VCR. The line will be connected to the 


Coming out from under a baseboard heater or other location. See Figure 1-5 for the wiring 
Notes: For optimum performance, be sure to connect your 


Wireless Gateway to the first point the cable enters your home. 
The splitter must be rated for at least 1GHz. 


Cable drop 


------ =. 


TV converter 


TV converter 


i = Splitters 


Grounding rod 


Fig. 1-6 Basic Home Wiring 
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Installation procedure for connecting to the Ethernet interface 


Follow these steps for proper installation. Plug the coaxial cable to the cable wall outlet and the other end to 
the modem connector labeled "CABLE". 


Note: To ensure a fast registration of the modem, the coaxial cable must be connected to the modem 
before it is powered on. 


Plug the power supply into the socket of the cable modem and two-pin on the adatper plug into the AC outlet. 


Note: Only use the power supply that comes with the modem. Using another power supply can cause 
damage to the product, and will void the warranty. 


Connect an Ethernet cable (direct connection, see below) to the Ethernet port at the back of the computer, 
and the other end to the ETHERNET port on the rear panel of the cable modem. The modem will seek the 
appropriate cable signal on the cable television network and go through the initial registration process on its 
own. The modem is ready for data transfer after the green LED "ONLINE" is lit continuously. 


Note: the button "reset" at the back of the modem is used primarily for maintenance. 


RF 
® Cables 


Cable 
Splitter 


RF 
Cables 


Fig. 1-7 Connect to the Modem 
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Connecting More Than one Computer to the Wireless Gateway 


If you need to connect more than two computers or if you need to connect two computers, you’ ll need the 
following additional equipment (if supported by your cable operator): 


* Crossover-wired, or “null,” category 5 Ethernet cable for the cable modem to be connected to the 
hub 


* 10/100/1000BaseT Hub or Switch 
* Straight through, or standard, category 5 Ethernet cable (one for each computer to be connected) 


If you have a hub with an uplink port a straight through cable can be used in combination with that port in 
lieu of the crossover cable. 


An uplink port has a small switch on it to change the polarity of the connection. It can accept either a 
crossover or a straight cable, depending on the setting. 


: 


Reset © ae 


Alf Bie 


Fig. 1-8 Connect to two more computer 
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CHAPTER 2: WEB CONFIGURATION 


To make sure that you can access the Internet successfully, please check the following first. 


1. Make sure the connection (through Ethernet) between the Wireless Gateway and your computer is OK. 
2. Make sure the TCP/IP protocol is set properly. 
3. Subscribe to a Cable Company. 


Accessing the Web Configuration 
The Wireless Gateway offers local management capability through a built-in HTTP server and a number of 


diagnostic and configuration web pages. You can configure the settings on the web page and apply them to 
the device. 


Your host PC IP address need to change as below in your environment if you would like to access on 
LAN side. 


IP: 192.168.1.184 ; MASK: 255.255.255.0 ; GATEWAY: 192.168.1.254 
Once your host PC is properly configured; please proceed as follows: 


1. Start your web browser and type the private IP address of the Wireless Gateway on the URL 
field: 192.168.1.254 

2. After connecting to the device, you will be prompted to enter username and password. By 
default, the username is “ admin” and the password is “CPE#xxxxxx”’.(xxxxxx = CM MAC 
last 6 numbers) 


38423) 192.168.1254 


fih> Technicolor ASUARES 192.169.1254 BSP RBe 
BORE ° 


SS tie e kes ASseeeeBUTeSyA 
SURGE (ARE TEREBH) - 


ASAE: G ¥| 
EP): 
atts R) 
Aue 


Fig2-1 Login dialogue 


If you login successfully, the main page will appear. 
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Outline of Web Manager 


The main screen will be shown as below. 
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Status - Network- Advanced -  Firewall- Parental Control - Wireless 
Saal - 


>» Software Status 
Software : This page displays information on the current system software. 
Connection 
Password 
Diagnostics icici 
Standard Specification Compliant DOCSIS 3.0 
Event Log 
Hardware Version 1.0 
Initial Scan Software Version STF4.09.01.T2 Main Window 
Switch Mode Cable Modem MAC Address 00:90:00:11:11:01 
Cable Modem Serial Number 54321123456940 
Backup/Restore 
CM Certificate Not Installed 


CM Config File (ot iii) 


Status 


System Up Time 0 days 00h:04m:01s 


Network Access Allowed 


Cable Modem IP Address ee ee 
Fig. 2-2 Outline of Web Manager 
Menu: For entering each function, e.g., Status, Network, Firewall... 


Title: the sidebar on the left side of the page indicates the title of this management interface, e.g., 
Software in this example 


@ Main Window: the current workspace of the web management, containing configuration or status 
information 


For easy navigation, the pages are organized in groups with group in names main menu. Individual page 
names within each group are provided in the sub menu and sidebar. So to navigate to a page, click the group 
hyperlink at the top, then the sub menu for the function, finally choose the title on the sidebar. 


Your cable company may not support the reporting of some items of information listed on your gateway’s 
internal web pages. In such cases, the information field appears blank. This is normal. 
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Warning message to change the password 


At your first connection or while the password is the default one, a warning message is displayed on the top 
banner of each Web configuration page. 
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Status - Network- Advanced-  Firewall- Parental Control - Wireless 
yN 
ee al 
Software Status 


: Password : This page allows configuration of administration access privileges and the ability to restore factory 
Connection defaults to the system. 


> Password 
Diagnostics 
Event Log 
User Name 
Initial Scan paccunra 
Switch Mode Re-enter Password 
Backup/Restore GUI Session Timeout |600 Seconds 


Restore Factory Defaults O Yes © No 


Apply 
Reset Cable Modem | Reboot cM 


Fig.2-3 Status\Password 
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Status Web Page Group 


1. Software 


The information section shows the hardware and software information about your gateway. 


The status section of this page shows how long your gateway has operated since last time being powered up, 
and some key information the Cable Modem received during the initialization process with your cable 
company. If Network Access shows “Allowed,” then your cable company has configured your gateway to 
have Internet connectivity. If not, you may not have Internet access, and should contact your cable company 
to resolve this. 
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Status - Network- Advanced-  Firewall- Parental Control - Wireless 
- SS — 
> Software Status 
Software : This page displays information on the current system software. 
Connection 
Password 
Diagnostics Information 
Standard Specification Compliant DOCSIS 3.0 
Event Log 
Hardware Version 1.0 
Initial Scan Software Version STF4.09.01.72 
Switch Mode Cable Modem MAC Address 00:90:00:11:11:01 
Cable Modem Serial Number 54321123456940 
Backup/Restore 
CM Certificate Not Installed 
CM Config File Capesssceeetet cig 
Status 
System Up Time 0 days 00h:04m:01s 
Network Access Allowed 


Cable Modem IP Address seitsd ect as 


Fig.2-4 Status\Software 


Page 22/78 


technicolor 


2. Connection 


This page reports current connection status containing startup procedures, downstream and upstream status, 
CM online information, and so on. The information can be useful to your cable company’s support 
technician if you’re having problems. 
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Status - Network- Advanced-  Firewall- Parental Control - Wireless 
ys 
bs al 
Software Status 


Connection : This page displays information on the status of the cable modem's HFC and IP network connectivity. 
> Connection 


Password 
Diagnostics Startup Procedure 
Procedure Status Comment 
Event Log 
Acquire Downstream Channel Locked 
Initial Scan Connectivity State OK Operational 
Switch Mode Boot State OK Operational 
Configuration Fil OK 
Backup/Restore i lata 
Security Disabled Disabled 


Downstream Channel 
Channel Lock Status Modulation Channel ID Symbol Rate Frequency Power SNR 
1 Locked QAM256 1 5360537 5.1dBmvV 48.8 dB 


2 Locked) QAM256 2 5360537 49dBmvV 49.8 dB 
3 Locked) QAM256 3 5360537 47dBmvV 49.9 dB 
- Locked) QAM256 . 5360537 47dBmV 47.4 dB 
5 Locked QAM256 5 5360537 46dBmvV 47.4 dB 
6 Locked QAM256 6 5360537 46 dBmvV 48.7 dB 
7 Locked) QAM256 f 5360537 43 dBmvV 49.8 dB 
8 Locked QAM256 8 5360537 41dBmvV 48.9 dB 


Upstream Channel 


Channel Lock Status Modulation Channel ID Symbol Rate Frequency Power 


1 Locked QAM64 3 2560 Ksym/sec 27.3 dBmV 
2 Locked QAM64 2 2560 Ksym/sec 26.7 dBmV 
3 Locked QAM64 1 2560 Ksym/sec 22.5 dBmV 
4 Locked QAM64 4 2560 Ksym/sec 28.5 dBmV 
CM IP Address Duration Expires 
wan nanan D: -- H: -- Mi -- S: -- aoe nae 2+ I 


Current System Time: Thu Dec 26 17:17:37 2013 


Fig. 2-5 Status\Connection 
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3. Password 


By default, the username is “ admin” and the password is “CPE#xxxxxx”’.(xxxxxx = CM MAC last 6 
numbers). 


This is set by different actions (non exhaustive list): 


- at the manufactory level, 
- following a reset factory on the modem, 
- following a reset from the operator, 
- following a change by the user who wants to come back to the default setting after using its own 
settings 
When the current password is the default one, the user is strongly encouraged to change the default web 
password. 


At your first connection or while the password is the default one, a warning message is displayed on the top 
banner of each Web configuration page. We want to encourage you to change the password in order to 
enforce the security of your modem. 


The password can be a maximum of 8 characters and is case sensitive. In addition, this page can be used to 
restore the gateway to its original factory settings. Use this with caution, as all the settings you have made 
will be lost. To perform this reset, set Restore Factory Defaults to Yes and click Apply. This has the same 
effect as a factory reset using the rear panel reset switch, where you hold on the switch for 5 seconds, then 
release it. 


Note: We are always suggesting you to modify the password. This is a basic protection against wrongful 
access to the Gateway Web pages. 


technicolor ' 
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Status - Network- Advanced-  Firewall- Parental Control - Wireless 
, 
ee Tr 


Status 


Software 
Password : This page allows configuration of administration access privileges and the ability to restore factory 


Connection defaults to the system. 
> Password 
Diagnostics 
Event Log 
User Name 
Initial Scan Password 
Gachviode Re-enter Password 
Backup/Restore GUI Session Timeout |600 Seconds 


Restore Factory Defaults O yes © No 
Apply 
Reset Cable Modem 


Fig. 2-6 Status\Password 
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4. Diagnostics 


This page offers basic diagnostic tools for you to use when connectivity problems occur. When you ping an 
Internet device, you send a packet to its TCP/IP stack, and it sends one back to yours. To use the ping Test, 
enter the information needed and press Start Test; the Result will be displayed in the lower part of the 
window. Press Abort Test to stop, and Clear Results to clear the result contents. Note: Firewalls may cause 
pings to fail but still provide you TCP/IP access to selected devices behind them. Keep this in mind when 
ping a device that may be behind a firewall. Ping is most useful to verify connectivity with PCs which do not 
have firewalls, such as the PCs on your LAN side. 


technicolor 
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Status - Network- Advanced - Firewall - Parental Control- Wireless 


a 
Software 
Connection 
Password 
> Diagnostics 
Event Log 
Initial Scan 
Switch Mode 


Backup/Restore 


Status 


Diagnostics : This page provides for ping, tracert and NSLookup diagnostics to the LAN to help with IP 


connectivity problems. 


Ping Test Parameters 
Ping Target |192.168.1.254 
Ping Source: [WAN|¥] 


Ping Size 64 bytes 
No. of Pings 3 
Ping Interval 1000 ms 
| Abort Test | Clear Results 
Results 


Waiting for input... 


To get an update of the results you must REFRESH the page 
Tracert Test Parameters 
Tracert Test Parameters 
Tracert Target 168 .|/1 |. |254 


Max Hops 30 


Tracert Interval 1000 |ms 


Start Test | Abort Test | Clear Results 


Results 
Waiting for input... 


Tracert Target To get an update of the results you must REFRESH the page 
NSLookup Test Parameters 
Target Host |www.qoogle.com 
DNS (DNs-1 [¥] 
User DNS IP [0 (0 (0 (0 


Start Test || Abort Test |] Clear Results 


Results 


|Waiting for input... 


Fig. 2-7 Status\Diagnostics 
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5. Event Log 


This page displays the contents of the SNMP event log. Press “Clear Log” button to clear the logs. 


Status - Network- Advanced-  Firewall- Parental Control - Wireless 
PN 


Software Status 


SNMP Event Log : This page displays the contents of the SNMP event log. 
Connection 


Password 


Diagnostics 


Ww 


Event Log 
Initial Scan 
Switch Mode 


Backup/Restore 


Clear Log 


Fig. 2-8 Status\Event Log 
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6. Initial Scan 
To speed up the modem’s first time connection, enter known downstream frequency and/or upstream 
channel ID information here. Then click “Apply and Reboot” button to start scanning the cable network 


beginning with the values supplied here. 


The value is provided in Hertz. So, for 603 MHz, you must type: 603000000 


technicolor 


Status - Network- Advanced -  Firewall- Parental Control - Wireless 
a r 
Status 
Software 
; Initial Scan : To speed up the modem'’s first time startup, enter known downstream frequency and/or upstream 
Connection channel ID information here. Then click the ‘Apply’ button. The modem will start scanning the cable network 
beginning with the values supplied here. 
Password 9 9 PP 
Diagnostics 
Event Log 
> Initial Scan Initial DS Frequency : 603000000 Upstream Channel ID: 3 
Switch Mode 
Backup/Restore 


Fig. 2-9 Status\Initial Scan 
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7. Switch Mode 


This page displays switch mode information. It can be disabled, IPv4-Only, IPv6-Only, IPv4+IPv6 and 
Legacy RG IPv4 mode. 


By selecting the switch mode and then clicking Apply button for enabling it. 
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Status - Network- Advanced -  Firewall- Parental Control - Wireless 
ys — 
Status 
Software 
Switch Mode : This page displays switch mode. 
Connection 
Password 
Diagnostics 
Current Mode Legacy RG IPv4 Mode 
Event Log a= = 
Switch Mode [Legacy RG IPv4 Mode v) 
Initial Scan 
> Switch Mode 
Backup/Restore 


Fig 2-10 Status\ Backup/Restore 
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8. Backup/Restore 


Backup/Restore Settings: This page allows you to save your current settings locally on your PC, or restore 
settings previously saved. The default file name is “GatewaySettings.bin”’. 
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Status - Network- Advanced- Firewall- Parental Control - Wireless 
a 


_—_r 


Software 
Connection 
Password 
Diagnostics 
Event Log 
Initial Scan 
Switch Mode 


> Backup/Restore 


Status 


Backup/Restore Settings : This page allows you to save your current settings locally on your PC, or 
restored settings previously saved. 


Backup 


Restore Settings 


No file selected, 


Fig 2-11 Status\ Backup/Restore 
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Network Web Page Group 


1. LAN 
You can activate the DHCP server function for the LAN on this page. 


With this function activated, 


e your cable company’s DHCP server provides one IP address for your gateway, 
e and your gateway’s DHCP server provides IP addresses, starting at the address you set in IP Address 
on the LAN page, to your PCs. A DHCP server leases an IP address with an expiration time. 


To change the IP address that your gateway will use on the LAN side, enter it into the IP Address box and 
then click Apply. 


IP Address and Subnet Mask: 
A private IP address and Subnet Mask for LAN sub netting. 
For example 192.168.0.1./ 255.255.255.0. 


DHCP Server: 


@ Select the check point of “Yes” or “No” to enable or disable a simple DHCP server for LAN. 

® Configure the IP address numbers for the DHCP server with “Lease pool start” and “Lease pool end”. 

®@ Configure the IP address lease time with “Lease time” for DHCP server. Default value is 604800 
seconds. 
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Status - Network- Advanced -  Firewall- Parental Control - Wireless 
= 
Network 
> LAN 
LAN : This page allows configuration and status of the optional internal DHCP server for the LAN. 
WAN 
Computers 
DDNS Network Configuration 
IP Address: 192.168.1.254 
Time Subnet Mask: 255.255.255.0 
FTP Diagnostics MAC Address 28:be:9b:de:ad:05 
Portbase DHCP Server @yYes ONo 
Passthrough 
Lease Pool Start 192.168.1.50 
Lease Pool End 192.168.1.150 
Lease Time 604800 


Fig. 2-12 Network\LAN 
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2. WAN 


You can configure the optional internal DHCP server for the WAN on this page. This can be required by 
some ISP providers. 


Select different WAN Connection Type will lead to different contents. Take the WAN connection type- 
DHCP for example, you can release and renew the WAN lease by pressing the buttons. 


You can enter a spoofed MAC address that causes your gateway networking stack to use that MAC address 
when communicating instead of the usual WAN MAC address, e.g., if the MAC address is 
00:10:18:de:ad:03, this spoofed MAC address could be 00:1 1:e3:df:ad:05 or any desired MAC address. 


Status - Network- Advanced - Firewall- Parental Control - Wireless 
id 
Network 
LAN 
WAN : This page allows configuration and status of the internal DHCP client for the WAN. 
> WAN 
Computers 
DDNS WAN 
IPv4 Address: 10.10.146.65 
Time MAC Address: 28:be:9b:de:ad:03 
FTP Diagnostics Duration D: 0O H: 22 M: 25S: 20 
Expires: Fri Dec 27 15:45:39 2013 
Portbase IPv4 DNS Servers: 10.10.159.253 


Passthrough 


Release WAN Lease Renew WAN Lease 
WAN Connection Type | DHCP v 


Ipv4 MTU Size is) (256-1500 octets, 0 = use default) 
Spoofed MAC Address [00 |: |00 |: |00 : (00 |: 00 |: 00 


Fig.2-13 Network\WAN 
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3. Computers 


This page displays the status of the DHCP clients and current system time. You can cancel an IP address 
lease by selecting it in the DHCP Client Lease Info list and then clicking the Force Available button. If you 
do so, you may have to perform a DHCP Renew on that PC, so that it can obtain a new lease. 


Status - Network- Advanced -  Firewall- Parental Control - Wireless 
a 
——_—_——_—————__»* 
Network 
LAN 
Computers : This page shows the status of the DHCP clients and current system time. 
WAN 


> Computers 


DHCP Clients 


| MAC Address IP Address Subnet Mask Duration === Expires = Select 
me €B6000855¢54 192.168.001.050 286.255.285.000 D:07 H100 M:00 $:00 Thu Jan 02 17:20:47 2014 O 


FTP Diagnostics 


DDNS 


Current System Time : Thu Dec 26 17:39:47 2013 


Portbase Force Available 


Passthrough 


Fig.2-14 Network\Computers 
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4. DDNS - Dynamic DNS service 


This page allows to setup for Dynamic DNS server. 
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Status - Network- Advanced -  Firewall- Parental Control - Wireless 
a 


LAN 
WAN 


Computers 


Ww 


DDNS 
Time 
FTP Diagnostics 


Portbase 
Passthrough 


Network 


DDNS : This page allows setup of Dynamic DNS service. 


DDNS Service: | Disabled iv) 


User Name: 

Password: 

Host Name: 

IP Address: 10.10.146.65 

Status: DDNS service is not enabled. 


Fig.2-15 Network\DDNS 


DDNS Service- Choose Enabled ( www.DynDNS.org ) to enable the basic setting. Choose Disabled to 


close the basic setting. 


Username- The username that you registered with your DDNS provider. 

Password- The password that you registered with your DDNS provider 

Host Name- The domain name or host name that is registered with your DDNS provider 
Status- It shows the DDNS service status whether it is enabled or disabled. 


Click Apply to save the changes. 
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5. Time 


This page allows configuration and display of the system time obtained from network servers via Simple 
Network Time Protocol. The system has to be reset for any changes to take effect. 
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Status - Network- Advanced - Firewall- Parental Control - Wireless 
y 


See al 


LAN 
WAN 
Computers 
DDNS 

> Time 
FTP Diagnostics 


Portbase 
Passthrough 


Network 


Time : This page allows configuration and display of the system time obtained from network servers via Simple 
Network Time Protocol. The system has to be reset for any changes to take effect. 


Enable SNTP Oyes ©No 

Current Time Thu Dec 26 17:40:12 2013 
System Start Time Thu Dec 26 17:19:19 2013 
Time Server 1 clock.via.net 

Time Server 2 ntp.nasa.qov 

Time Server 3 tick.ucla.edu 


Timezone Offset Hours[0 [¥|Minutes[o [¥] 


Apply Reset Values 


Fig.2-16 Network\Time 
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6. FTP Diagnostics 


This page allows to diagnostic download and upload transmit rate through FTP. Choose known FTP server 
and FileName with correct usernamne and password then choose direction to Download or Upload. Press the 


‘Start’ button to start. 
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Status - Network- Advanced - Firewall- Parental Control- Wireless 
a 
es atl 
Network 
LAN 
FTP Diagnostics 
WAN 
Computers 
FTP Server IP Address 0.0.0.0 
DDNS Filename FileName.txt 
Time Username ftp 
Password 
b> FTP Diagnostics Direction ® Download 
Portbase Transfer 
Passthrough 
Fig.2-17 


You will see the result on the page, when transmit done. 


FTP Download 

Payload Data Bytes 6296 bytes 
Total Packet Bytes 6752 bytes 
Elapsed Time 0.027260 Secs 
Payload Throughput 1.847689 Mbps 
Packet Throughput 1.981511 Mbps 


Gateway\Network\FTP Diagnostics 
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7. Port-base Passthrough 


This page allows the configuration of each Ethernet Port. Per default, each Ethernet port is routed. If you 
enable the Passthrough, the Ethernet Port will have a direct connection to the Network. Note that access to 
this web access can be denied by your Cable operator. 
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Status - Network- Advanced -  Firewall- Parental Control - Wireless 
a 
=e 
ais Network 


Port-base Passthrough : This page allows the configuration of each Ethernet Port. Per default, each Ethernet 
WAN port is routed. If you enable the Passthrough, the Ethernet Port will have a direct connection to the Network. Note 
that access to this web access can be denied by your Cable operator. 


Computers 
DDNS 
Time Passthrough MAC Addresses (example: 01:23:45:67:89:AB) 
FTP Diagnostics 
] 
Portbase 


Passthrough 
__| Addresses entered: 0/32 


Remove MAC Address Clear All 


Fig.2-18 Network\Port-base Passthrough 
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Advanced Web Page Group 


1. Options 


This page allows you to enable/disable some features of the Wireless Gateway. 
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Status - Network - Advanced - Firewall - Parental Control - Wireless 
- r 
b teacas Advanced 

Options : This page allows configuration of advanced features of the broadband gateway. 

IP Filtering 

MAC Filtering 

Port Filtering WAN Blocking M Enable 
IPsec Passthrough M Enable 

Forwarding PPTP Passthrough M Enable 

Port Triggers L2TP Passthrough M Enable 
Remote Config Management [1] Enable 

DMZ Host Multicast Enable M Enable 

RIP Setup UPnP Enable M Enable 

NAT ALG Status 

RSVP M Enable 
FTP M Enable 
TFTP M Enable 
Kerb88 M Enable 
NetBios M Enable 
IKE M Enable 
RTSP M Enable 
Kerb1293 M Enable 
H225 M Enable 
PPTP M Enable 
MSN M Enable 
sIP M Enable 
ICQ M Enable 
IRC666x M Enable 
ICQTalk M Enable 
Net2Phone M Enable 
IRC7000 M Enable 
IRC8000 M Enable 


Fig.2-19 Advanced\Options 


@ WAN Blocking prevents others on the WAN side from being able to ping your gateway. With WAN 
Blocking enabled, your gateway will not respond to pings it receives, effectively “hiding” your gateway. 


@ Ipsec PassThrough enables IpSec type packets to pass WAN & LAN. IpSec (IP Security) is a security 
mechanism used in Virtual Private Networks (VPNs). 


@ PPTP PassThrough enables PPTP type packets to pass WAN © LAN. PPTP (Point to Point 
Tunneling Protocol) is another mechanism sometimes used in VPNs. 
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@ Remote Config Management makes the configuration web pages in your gateway accessible from the 
WAN side. Note that page access is limited to only those who know the gateway access password. 
When accessing your gateway from a remote location, your must use HTTP port 8080 and the WAN IP 


address of the gateway. e.g., if the WAN IP address is 157.254.5.7, you would navigate to 
http://157.254.5.7:8080 to reach your gateway. 


@ Miulticast Enable enables multicast traffic to pass WAN LAN. You may need to enable this to see 
some types of broadcast streaming and content on the Internet. 


@ UPnP Universal Plug and Play (UPnP) helps devices, such as Internet appliances and computers, 
access the network and connect to other devices as needed. UPnP devices can automatically discover 
the services from other registered UPnP devices on the network. 


@ NAT ALG enable NAT ALG (application layer gateways) allows customized NAT traversal filters to 
be plugged into the gateway to support address and port translation for certain application layer 
"control/data" protocols such as RSVP, FTP, TFTP, Kerb88, NetBios , IKE, RTSP, Kerb1293 , H225 , 
PPTP , MSN, SIP , ICQ , IRC666x , ICQTalk , Net2Phone , IRC7000 , IRC8000 file transfer in IM 
applications etc. In order for these protocols to work through NAT or a firewall, either the application 
has to know about an address/port number combination that allows incoming packets, or the NAT has 
to monitor the control traffic and open up port mappings (firewall pinhole) dynamically as required. 
Legitimate application data can thus be passed through the security checks of the firewall or NAT that 
would have otherwise restricted the traffic for not meeting its limited filter criteria. 
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2. IP Filtering 


This page enables you to enter the IP address ranges of PCs on your LAN that you don’t want to have 
outbound access to the WAN. These PCs can still communicate with each other on your LAN, but packets 
they send to WAN addresses are blocked by the gateway. 


technicolor 


Status - Network- Advanced - Firewall- Parental Control - Wireless 
PN 
es al 
: Advanced 
Options 
IP Filtering : This page allows the configuration of IP Address filters in order to block internet traffic to specific 
> IP Filtering network devices on the LAN. 
MAC Filtering 
Port Filtering 
IP Filtering 
Forwarding Start Address End Address Enabled 
‘ 192.168.1.0 192.168.1.0 Oo 
Port Triggers 
192.168.1.0 192.168.1.0 oO 
DMZ Host 192.168.1.0 | 192.168.1.0 0 
-168.1. -168.1. 0 
RIP Setup 192.168.1.0 192.168.1.0 
192.168.1.0 192.168.1.0 O 
192.168.1.0 | 192.168.1.0 al 
192.168.1.0 | 192.168.1.0 Oo 
192.168.1.0 192.168.1.0 al 
192.168.1.0 192.168.1.0 O 
192.168.1.0 192.168.1.0 O 


Fig.2-20 Advanced\IP Filtering 
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3. MAC Filtering 


This page enables you to enter the MAC address of specific PCs on your LAN that you do not wish to have 
outbound access to the WAN. As with IP filtering, these PCs can still communicate with each other through 


the gateway, but packets they send to WAN addresses are blocked. 
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Status - Network- Advanced - Firewall- Parental Control - Wireless 
y 
SSE 
: Advanced 
Options 


MAC Filtering : This page allows the configuration of MAC Address filters in order to block internet traffic to 


IP Filtering specific network devices on the LAN. 


> MAC Filtering 


Port Filtering 
MAC Address Filters 


Forwarding MAC 01/00: 00: 00: OO% 00: oo MAC 02/00: 00: OO: 00% 00: 00 
3 MAC 03/00: 00: 00: 00% 00: 00 MAC 04/00: 00: OO: 00% 00: 00 
Port Triggers 
MAC 05/00: 00: 00: 00% 00: oo MAC 06/00: 00) OO: 00% 00: 00 
DMZ Host MAC 07 |00: 00: 00) |00: O0: 00 MAC 08 |00: 00: 00): 00% OO: 00 
MAC 09 00: 00: /00: 00: 00: /00 MAC 10/00: 00: 00: OO: 00: \00 
RIP Setup 
MAC 11/00: 00: 00: 00% 00: 00 MAC 12/00: 00: OO: OO; 00: 00 
MAC 13/00: (00: 00: OO: 00: 00 MAC 14/00: 00: 00: 00% 00: 00 
MAC 15/00: 00: 00: 00% 00: o0 MAC 16/00: 00: OO: 00% 00: 00 
MAC 17/00: 00: 00: OO% 00: 00 MAC 18/00: 00: 00: 00% 00: 00 
MAC 19/00: 00: 00: 00% 00: o0 MAC 20/00: 00: OO: 00% 00: 00 


Fig.2-21 Advanced\MAC Filtering 
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4. Port Filtering 

This page allows you to enter ranges of destination ports (applications) that you don’t want your LAN PCs 
to send packets to. Any packets your LAN PCs send to these destination ports will be blocked. For example, 
you could block access to worldwide web browsing (http = port 80) but still allow email service (SMTP port 
25 and POP-3 port 110). To enable port filtering, set Start Port and End Port for each range, and click Apply. 
To block only one port, set both Start and End ports with the same value. 
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Status - Network- Advanced - Firewall- Parental Control - Wireless 
PN 
oy 


; Advanced 
Options 


ary Port Filtering : This page allows the configuration of port filters in order to block specific internet services to all 
IP Filtering devices on the LAN. 


MAC Filtering 
> Port Filtering 
Port Filtering 
Forwarding Start Port End Port Protocol Enabled 
j 1 65535| [Both|y] O 
Port Triggers a 
1 65535, |Both|¥| 0 
DMZ Host 1 65535, |Both{y] O 
1 65535, |Both|¥| O 
RIP Setup — 
1 65535| ([Both/y| O 
1 65535, |Both|¥] O 
1 65535| {Both|y] O 
1 65535, [Both|y)] O 
1 65535, [Both|¥) O 
1 65535, [Both|y] O 


Fig.2-22 Advanced\Port Filtering 
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5. Forwarding 


For LAN < WAN communications, the gateway normally only allows you to originate an IP connection 
with a PC on the WAN; it will ignore attempts of the WAN PC to originate a connection onto your PC. This 
protects you from malicious attacks from outsiders. However, sometimes you may wish for anyone outside 
to be able to originate a connection to a particular PC on your LAN if the destination port (application) 
matches one you specify. 


This page allows you to specify up to rules. For example, to specify that outsiders should have access to an 
FTP server you have running at 192.168.0.5, create a rule with that address and Start Port =20 and End Port 
=21 (FTP port ranges) and Protocol = TCP (FTP runs over TCP and the other transport protocol, UDP), and 
click Apply. This will cause inbound packets that match to be forwarded to that PC rather than blocked. As 
these connections are not tracked, no entry is made for them in the Connection Table. The same IP address 
can be entered multiple times with different ports. 


technicolor 


Status - Network- Advanced - Firewall- Parental Control - Wireless 
y 
a 


: Advanced 
Options 


Forwarding : This page allows for incoming requests on specific port numbers to reach web servers, FTP 


servers, mail servers, etc. so they can be accessible from the public internet. A table of commonly used port 
numbers is also provided. 


IP Filtering 
MAC Filtering 


Port Filtering 


> Forwarding Create IPv4 


Port Triggers 
Port Forwarding 
DMZ Host 
Internal External 
RIP Setup IP Address Start Port End Port IP Address Start Port End Port Protocol Description Enabled 


UPNP port mapping 

Protocol Start Port End Port Description 

TCP 5560 5560 QvodPlayer 

TCP 7404 7404 QvodPlayer 

TCP 58470 58470 Skype TCP at 192.168.1.50:58470 
UDP 5560 5560 QvodPlayer 

UDP 7404 7404 QvodPlayer 

UDP 58470 58470 Skype UDP at 192.168.1.50:58470 


Fig.2-23 Advanced\Forwarding 
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Press ‘Create Ipv4’ button to specify rules. 
Address 0.0.0.0 means allow all IP address. 


Local IP Address: 
External IP Address: 


Service Name: 


Local IP Address 
Local Start Port 
Local End Port 
External IP 
External Start Port 
External End Port 
Protocol 
Description 
Enabled 


Choose Service Name or Port number range to set up. IP 


Known Rule Adder 
0.0.0.0 
0.0.0.0 
AIM Talk 


lista] 


This will cause inbound packets that match to be forwarded to that PC rather than blocked. As these 
connections are not tracked, no entry is made for them in the Connection Table. The same IP address can be 


entered multiple times with different ports. 
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6. Port Triggers 


Some Internet activities, such as interactive gaming, require that a PC on the WAN side of your gateway be 
able to originate connections during the game with your game playing PC on the LAN side. You could use 
the Advanced-Forwarding web page to construct a forwarding rule during the game, and then remove it 
afterwards (to restore full protection to your LAN PC) to facilitate this. Port triggering is an elegant 
mechanism that does this work for you, each time you play the game. 


technicolor 


Status - Network- Advanced - Firewall- Parental Control - Wireless 
- PN 

: Advanced 
Options 

foe Port Triggers : This page allows configuration of dynamic triggers to specific devices on the LAN. This allows for 
IP Filtering special applicatons thta require specific port numbers with bi-directional traffic to function porperly. Applications 

such as video conferencing, voice, gaming, and some messenging program features require these special settings. 

MAC Filtering 9 9 9 ging prog q P 9 


Port Filtering 


Forwarding 


Port Triggers 


Lal 


DMZ Host 
si Port Triggering 


RIP Setup Trigger Range Target Range 


Start Port End Port Start Port End Port Protocol Description Enable 


Fig.2-24 Advanced\Port Triggers 


Port Triggering works as follows. Imagine you want to play a particular game with PCs somewhere on the 
Internet. You make one time effort to set up a Port Trigger for that game, by entering into Trigger Start 
Port and Tigger End Port the range of destination ports your game will be sending to, and entering into 
Target Start Port the range of destination ports the other player (on the WAN side) will be sending to 
(ports your PC’s game receives on). Application programs like games publish this information in user 
manuals. Later, each time you play the game, the gateway automatically creates the forwarding rule 
necessary. This rule is valid until 10 minutes after it sees game activity stop. After 10 minutes, the rule 
becomes inactive until the next matched outgoing traffic arrives. 


e.g., Suppose you specify Trigger Range from 6660 to 6670 and Target Range from 113 to 113. An outbound 
packet arrives at the gateway with your game-playing PC source IP address 192.168.0.10, destination port 
666 over TCP/IP. This destination port is within the Trigger destined for port 113 to your game-playing PC 
at 192.168.0.10. 
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Press ‘Create’ button to specify rules. Choose Service Name or Port number range to set up. IP Address 
0.0.0.0 means allow all IP address. 


Trigger Start Port |o 
Trigger End Port |o 
Target Start Port |o 
Target End Port |o 
Protocol ‘BOTH || 
Description 
Enabled Off |v 


This will cause inbound packets that match to be forwarded to that PC rather than blocked. As these 
connections are not tracked, no entry is made for them in the Connection Table. The same IP address can be 
entered multiple times with different ports. 
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7. DMZ Host 

Use this page to designate one PC on your LAN that should be left accessible to all PCs from the WAN side, 
for all ports. e.g., if you put an HTTP server on this machine, anyone will be able to access that HTTP server 
by using your gateway IP address as the destination. A setting of “0” indicates NO DMZ PC. “Host” is 
another Internet term for a PC connected to the Internet. 
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Status - Network- Advanced -  Firewall- Parental Control- Wireless 
a 
r 


: Advanced 
Options 


cae DMZ Host (Exposed Host) : This page allows configuration of a specific network device to be exposed or visible 
IP Filtering directly to the WAN (Public Internet). This may be used when problem applications do not work with port triggers. 


ee Entering a "O" means there are no exposed hosts. 
MAC Filtering 9 P 


Port Filtering 


DMZ Address 192.168.1.\0 


Forwarding 


Port Triggers 


Ww 


DMZ Host 


RIP Setup 


Fig.2-25 Advanced\DMZ Host 
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8. RIP (Routing Information Protocol) Setup 


This feature enables the gateway to be used in small business situations where more than one LAN (local 
area network) is installed. The RIP protocol provides the gateway a means to “advertise” available IP routes 
to these LANs to your cable operator, so packets can be routed properly in this situation. 


Your cable operator will advise you during installation if any setting changes are required here. 


technicolor 


Status - Network- Advanced - Firewall- Parental Control - Wireless 

Sa a , 

Advanced 
Options 

ee Routing Information Protocol Setup : This page allows configuration of RIP parameters related to 
IP Filtering authentication, destination IP address/subnet mask, and reporting intervals. RIP automatically identifies and uses 

the best known and quickest route to any given destination address. 

MAC Filtering q ¥9 


Port Filtering 


Forwarding RIP Support Disabled |) 
RIP Authentication O Enable 
Port Triggers RIP Authentication Key 
DMZ Host RIP Authentication Key ID [0 
RIP Reporting Interval 30 seconds 
Se 
> RIP Setup RIP Destination IP Address |o |.{0 |./o0 |. {0 


Fig.2-26 Advanced\RIP Setup 
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Firewall Web Page Group 


1. Web Content Filtering 


These pages allow you to enable, disable, and configure a variety of firewall features associated with web 
browsing, which uses the HTTP protocol and transports HTML web pages. On these pages, you designate 
the gateway packet types you want to have forwarded or blocked. You can activate settings by checking 
them and clicking Apply. 


The web-related filtering features you can activate from the Web Content Filter page include Filter Proxy, 
Filter Cookies, Filter Java Applets, Filter ActiveX, Filter Popup Windows, and Firewall Protection. 


If you want the gateway to exclude your selected filters to certain computers on your LAN, enter their MAC 
addresses in the Trusted Computers area of this page. 
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Status - Network- Advanced - Firewall- Parental Control- Wireless 
a 
_ rT 


> Web Filter Firewall 


Web Content Filter : This page allows certain Web-oriented cookies, java scripts, and pop-up windows to be 
TOD Filter blocked by the firewall. A list of "trusted computers" can also be defined that are not subject to any filters 
configured. Specific Firewall features can also be enabled. It is highly recommended that the firewall is left enabled 
at all times for protection against Denial of Service attacks. Go to the Parental Control page to block internet 
access to specific sites. 


Local Log 


Remote Log 


Allowed Services 


Web Features 


Filter Proxy OEnable No Ports Restricted 
Filter Cookies O Enable 

Filter Java Applets O Enable 

Filter Activex O Enable 

Filter Popup Windows O Enable 

Block Fragmented IP Packets LJ Enable 

Port Scan Detection O Enable 

IP Flood Detection O Enable 

Firewall Protection loff [| 


Trusted Computers 


oo =: |00 = 00 | 00 | 00 |: 00 


|No Trusted Computers 


Fig.2-27 Firewall\Web Filter 
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2. TOD Filtering 

Use this page to set rules that will block specific LAN side PCs from accessing the Internet, but only at 
specific days and times. Specify a PC by its hardware MAC address, and then use the tools to specify 
blocking time. Finally, click the Apply button to save your settings. 


technicolor 


Status - Network- Advanced - Firewall- Parental Control - Wireless 
r PN 

Firewall 
Web Filter 

Time of Day Access Filter : This page allows configuration of web access filters to block all internet traffic to and 

> TOD Filter from specific network devices based on time of day settings. 
Local Log 
Remote Log 
oo :|00 :|00 | |\00 |} 00 | |00 


[No filters entered.|¥] LJ Enabled 


Days to Block 
Oleveryday UJsSunday UMonday 0 Tuesday 
Ol wWednesday DO Thursday OFriday O Saturday 


Time to Block 

OAall Day 

Start: |12 _(hour)|00 _ (min) [amiy] 
End: [12  \(hour)|o0 (min) [AM[¥] 


Fig.2-28 Firewall\TOD Filtering 
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3. Local Log 


The gateway builds a log of firewall blocking actions that the firewall has taken. Using the Local Log page 
lets you specify an email address to which you want the gateway to email this log. You must also tell the 
gateway your outgoing (i.e. SMTP) email server’s name, so it can direct the email to it. Enable Email Alerts 
has the gateway forward email notices when Firewall protection events occur. Click E-mail Log to 
immediately send the email log. Click Clear Log to clear the table of entries for a fresh start. 


The log of these events is also visible on the screen. For each blocking event type that has taken place since 
the table was last cleared, the table shows Description, Count, Last Occurrence, Target, and Source. 
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Status - Network- Advanced- Firewall - Parental Control - Wireless 
a 
ne 


Web Filter Firewall 


Local Log : This page allows configuration of Firewall event log reporting via email alerts and a local view of the 


TOD Filter attacks on the system. 


>» Local Log 
aaa Contact Email Address 
SMTP Server Name 
SMTP Username 
SMTP Password 
E-mail Alerts O Enable 


E-mail Log || Clear Log 


Fig.2-29 Firewall\Local Log 
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4. Remote Log 


The Remote Log page allows you to specify the IP address where a SysLog server is located on the LAN 
Side and select different types of firewall events that may occur. Then, each time such an event occurs, 
notification is automatically sent to this log server. 
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Status - Network- Advanced - Firewall- Parental Control - Wireless 
oe 
Ee al 
Web Filter Firewall 
Remote Log : This page allows optional configuration of events to be sent to a local SysLog Server. 
TOD Filter 
Local Log 


> Remote Log Send selected events 
O Permitted Connections 
O Blocked Connections 


CO Known Internet Attacks 


O Product Configuration Events 
to Syslog Server at 192.168.1. 0 


Fig.2-30 Firewall\Remote Log 
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Parental Control Web Page Group 


1. Basic 


This page allows you to enable, disable, and configure a variety of firewall features associated with web 
browsing, which uses the HTTP protocol and transports HTML web pages. On these pages, you designate 
the gateway packet types you want to have forwarded or blocked. You can activate settings by checking 
them and clicking Apply. 


Here are some of your choices on the Parental Control page: 


@ Activate Keyword Blocking and specify some keywords in the Keyword List to cause blocking of web 
pages on the WAN side with the specified keyword in the content. 


@ Activate Domain Blocking and specify some Domain Names (e.g. www.ABC.com) in the Domain List. 
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Status - Network- Advanced - Firewall- Parental Control- Wireless 
yN 
$$ __—_—— 


Parental Control 


Basic Setup : This page allows basic selection of rules which block certain internet content and certain web sites. 
When you change your Parental Control Settings, you must click on the appropriate "Apply", "Add" or "Remove" 
button for your new settings to take effect. If you refresh your browser's display, you will see the currently active 
settings. 


Content Filtering 
Keyword Blocking [Enable 
Domain Blocking LC Enable 


Keyword List 
Blocked Domain List 
a 


Remove Domain 


Fig.2-31 Parental Control\Basic 
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Wireless Web Page Group 


The Wireless web pages group enables a variety of settings that can provide secure and reliable wireless 
communications for even the most demanding tech-savvy user. 


The Wireless Gateway offers a choice of 802.11b/g/n, WPA and WPA-PSK authentication of your PCs to 
the gateway, 64 and 128 bit WEP encryption of communication between the gateway and your PCs to 
guaranty security, and an Access Control List function that enables you to restrict wireless access to only 
your specific PCs. 


Performance 

Because your wireless communication travels through the air, the factory default wireless channel setting 
may not provide optimum performance in your home if you or your neighbors have other interfering 2.4GHz 
devices such as cordless phones. If your wireless PC is experiencing very sluggish or dramatically slower 
communication compared with the speed you achieve on your PC that is wired to the gateway, try changing 
the channel number. See the 802.1 1b/g/n Basic Web Page discussion below for details. 


Authentication 

Authentication enables you to restrict your gateway from communicating with any remote wireless PCs that 
aren’t yours. The following minimum authentication-related changes to factory defaults are recommended. 
See the 802.11b/g/n Basic and Access Control Web Page discussions below for details. 


Network Name (SSID) — Set a unique name you choose 
Network Type — Set to Open 
Access Control List — Enter your wireless PCs’ MAC addresses 


Security 

Security secures or scrambles messages traveling through the air between your wireless PCs and the gateway, 
so they can’t be observed by others. The following minimum security setting changes to factory defaults are 
recommended. See the 802.11b/g/n Security Web Page discussion below for details. 
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1. Radio 


To set the basic configuration for the wireless features, click RADIO from the Wireless menu. These must 
match the settings you make on your wireless-equipped PC on the LAN side. 
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Status - Network- Advanced -  Firewall- Parental Control - Wireless 
a 
= - vr 


i iii Wireless 
adio 


802.11 Radio : This page allows configuraton of the Wireless Radio including current country and channel 


Primary Network number: 


Access Control 
Advanced — 
Interface [Enabled [¥] 
Bridging Wireless MAC Address: FC:94:£3:25:1B:F5 
Output Power | 100%[¥| 
802.11 Band [2.4 Ghz[¥] Current : 2.4 GHz 
802.11 n-mode [Auto [¥] 
802.11 N Support Required |off|¥] 
Bandwidth [20 Mhz[¥] Current : 20MHz 
Sideband for Control Channel (40 Mhz only) 
Channel {Auto [¥] 


WMM 


Current Channel: 11 
Interference Level: Acceptable 
Regulatory Mode | off v| 
TPC Mitigation (db) 
OBSS Coexistence |1 (Enabled) [¥] 
STBC Tx [Auto [¥] 


Apply Restore Wireless Defaults 
Scan Wireless APs 


Fig.2-32 Wireless\Radio 


@ Interface: The wireless radio in your gateway can be completely de-activated by changing Interface to 
Disabled. Click the Apply button to save your settings. Activated by changing interface to enabled 


@ Wireless MAC Address: The MAC address for this wireless device will be displayed in this field 
automatically. 


@ Output Power: This setting decides the output power of this device. You may use it to economize on 
electricity by selecting lower percentage of power output. Control the range of the AP by adjusting the 
radio output power. 


@® 802.11 Band: It only support 2.4 GHz band. 


802.11 n-mode: It may help you to Enable or Disable the 11N mode. To enable you need to select 
Auto, to disable you need to select Off, and so force the AP to operate in 802.11 n-mode. 


@ Bandwidth: Select wireless channel width 20 MHz is for default value (bandwidth taken by wireless 
signals of this access point.) 
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@ Sideband for Control Channel (40 MHz only): There is “Lower” and “Upper” can be selected if 
Bandwidth 40 MHz was Enabled. 


@ New Channel: In 802.11 Band 2.4GHz, there are 1 to 13 channels. In 802.11 Band 5GHz, there are 36, 
AO, 44, 48 total 4 channels for all country. Choose the one that is suitable for this device. 


Current Channel: The channel that you choose will be displayed in this field. 
Regulatory Mode: suppose 802.11d and 802.1 1h to satisfy specific environment and request. 
TPC Mitigation (db): Fixed Maximum TX Power Level, options 0 ~ 4 db 


OBSS Coexistence: Overlapping BBS coexistence, here to control this function Enable or Disable, 
default was enabled. 


@ Restore Wireless defaults: To recover to the default settings, press this button to retrieve the settings 
then click Apply. 


Network Name Set the Network Name (also Up to 32-character string 
(SSID) known as SSID) of this containing ASCII UNE _XXXX 
network. characters only 


Network Type Select Closed to hide the 

network from active scans. 
Open, Closed 

Select Open to reveal the 
network to active scans. 

New Channel select a particular channel on 1-13 hectortl 
which to operate. 

Interface Enable or disable the wireless Enabled, Disabled Enabled 

interface. 


Table. 2-1 Basic Settings Definitions 
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2. Primary Network 


This page allows you to configure the Network Authentication. It provides several different modes of 
wireless security. You will have to enter proper information according to the mode you select. 
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Status - Network- Advanced-  Firewall- Parental Control - Wireless 
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802.11 Primary Network : This page allows configuraton of the primary wireless Network and its security settings. 
> Primary Network 


Access Control 


Primary Network UNE_1101 (fc:94:e3:25:1b:f5) 


Advanced 
Primary Network | Enabled || Automatic Security Configuration 
Bridging Network Name (SSID) UNE 1101 [wes |v] 
WMM Closed Network [Open _[¥] WPS Config State: Configured 
AP Isolate [Disabled|y| The physical button on the AP will provision wireless 
WPA Enterprise [Disabled v clients using Wi-Fi Protected Setup (WPS) 
WPA-PSK [Enabled [¥] 
WPA2 Enterprise [Disabled » Device Name |TechnicolorAP 


WPA2-PSK | Enabled |v 


WPS Setup AP 


WPA/WPA2 Encryption | TKIP+AES |v UUID:46374ffb270acdb22219ca4f576a9d30 
WPA Pre-shared Key |eeccececcecees PIN: |67441785 Generate AP PIN 
IT” Show Key 
RADIUS Server WPS Add Client 
ee Pe Add a client: 
RADIUS Key 
Client PIN: 


Authorized Client MAC: 
Group Key Rotation Interval |o 


WPA/WPA2 Re-auth Interval 


WEP Encryption [Deabiead 
Shared Key Authentication [Opnonal ~ 
802.1x Authentication [Disabled ¥ 
Network Key 1 | 
Network Key 2 — 
Network Key 3 [ 
Network Key 4 SSS aw 


Current Network Key 


Passphrase 


Fig. 2-33 Wireless\Primary Network 
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802.11x Authentication introduction 


If you enable the 802.11x authentication function, you will have to offer the following information- 


@ WPA (Wi-Fi Protected Access)/WPA2: 
It must be used in conjunction with an authentication server such as RADIUS to provide centralized 
access control and management. It can provide stronger encryption and authentication solution than 
none WPA modes. WPA2 is the second generation of WPA security. 


@ WPA-PSK (WPA-Pre-Shared Key) /WPA2-PSK (WPA2-Pre-Shared Key): 
It is useful for small places without authentication servers such as the network at home. It allows the 


use of manually-entered keys or passwords and is designed to be easily set up for home users. 


@ RADIUS Server: RADIUS Server is a protocol for carrying authentication, authorization, and 
configuration information between a Network Access Server which desires to authenticate its links and 
a shared Authentication Server. Please key in the IP Address for the RADIUS Server. 


@ RADIUS Port: Besides the IP address of the RADIUS Server, you have to enter the port number for 
the server. Port 1812 is the reserved RADIUS-authentication port described in RFC 2138. Earlier AP 
(RADIUS clients) use port 1945. The default value will be shown on this box. You can keep and use it. 


@ RADIUS Key: A RADIUS Key is like a password, which is used between IAS and the specific 
RADIUS client to verify identity. Both IAS and the RADIUS client must be use the same RADIUS 
Key for successful communication to occur. Enter the RADIUS Key. 
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a WPA/WPA2: 


For the WPA/WPA2 network Authentication, the settings that you can adjust including WPA/WPA2 
Encryption, RADIUS Server, RADIUS Port, RADIUS Key, Group Key Rotation Interval, and 
WPA/WPA2 Re-auth Interval. 


WPA/WPA2 Encryption: 
There are two types that you can choose, AES, TKIP+AES. 


TKIP takes the original master key only as a starting point and derives its encryption keys 
mathematically from this mater key. Then it regularly changes and rotates the encryption keys so that 
the same encryption key will never be used twice 


AES provides security between client workstations operating in ad hoc mode. It uses a mathematical 
ciphering algorithm that employs variable key sizes of 128, 192 or 256 bits. 


RADIUS Server/RADIUS Port/RADIUS Key: 

Please refer to the previous page. 

Group Key Rotation Interval: 

Key in the time for the WAP group key rotation interval. The unit is second. With increasing rekey 


interval, user bandwidth requirement is reduced. 


WPA/WPA2 Re-auth Interval: 
When a wireless client has associated with the Wireless Gateway for a period of time longer than the 
setting here, it would be disconnected and the authentication will be executed again. The default value 
is 3600, you may modify it. 
WPA Enterprise [Enabled [¥] 
WPA-PSK [Disabled ¥ 
WPA2 Enterprise [Enabled |¥) 
WPA2-PSK [Disabled ¥ 


WPA/WPA2 Encryption[AES _[¥| 
WPA Pre-shared Key [scecccccccocen 
[ Show Key 
RADIUS Server|0.0.0.0 


RADIUS Port [1812 


RADIUS Key | 


Group Key Rotation Interval lo 
WPA/WPA2 Re-auth Interval [3600 


Fig. 2-34 WPA/WPA2 
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= WPA-PSK/ WPA2-PSK: 
For the WPA-PSK/WPA2-PSK network Authentication, the settings that you can adjust including 
WPA/WPA2 Encryption, WPA Pre-Shared Key, and Group key Rotation Interval. 
@ WPA Pre-Shared Key: 


Please type the key to be between 8 and 63 characters, or 64 hexadecimal digits. Only the devices with 
a matching key that you set here can join this network. 


WPA Enterprise [Disabled » 
WPA-PSK | Enabled || 

WPA2 Enterprise [Disabled » 
WPA2-PSK [Enabled [¥] 


WPA/WPA2 Encryption | TKIP+AES iv) 
WPA Pre-shared Key |eeccecccccccee 


l Show Key 
RADIUS Serverlog00 
RADIUS Portligi2 
RADIUS Keyf (ti (i(‘<; 2 2 COS!” 


Group Key Rotation Interval lo 
WPA/WPA2 Re-auth Interval [- 600 


Fig. 2-35 WPA-PSK/WPA2-PSK 
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= WEP Encryption: 
You can choose 64-bit or 128-bit according to your needs. If you choose Disabled, the Network Keys 


will not be shown on this page. If selected, the data is encrypted using the key before being transmitted. 


e.g., If you set 128-bit in this field, then the receiving station must be set to use the128 Bit Encryption, 
and have the same Key value too. Otherwise, it will not be able to decrypt the data. 

(Note: You need to connect one end of the Ethernet cable to the Ethernet port on the back of your 
computer, and the other end to the ETHERNET port on the Wireless Gateway.) 


If you select WEP (64-bit or 128-bit), you can adjust the following settings- 


@ Shared Key Authentication: 
Decide whether to set the shared key Optional or Required by selecting from the drop-down menu. 


@ Network Key 1 to 4: 
The system allows you to enter four sets of the WEP key. For 64-bit WEP mode, the key length is 5 
characters or 10 hexadecimal digits. As for 128-bit WEP mode, the key length is 13 characters or 26 
hexadecimal digits. 


@ Current Network Key: 
Select one set of the network key (from 1 to 4) as the default one. 


@ = Passphrase: 
You can enter ASCII codes into this field. The range is from 8 characters to 64 characters. For ASCII 
characters, you can key in 63 characters in this field. If you want to key in 64 characters, only 
hexadecimal characters can be used. 


@ Generate WEP Keys: 
Click this button to generate the Passphrase. 


@ Apply: 
After proper configuration, click Apply to invoke the settings. 


WEP Encryption | WEP (128-bit) | 


Shared Key Authentication | Optional ¥ 
802.1x Authentication | Disabled ¥) 


Network Key 1 o0000000000000000000 
Network Key 2 [990000000000000000000 
Network Key 3 990000000000000000000 
Network Key 4 [o90000000000000000000 
Current Network Key 
PassPhrase {rc t—‘(SCSsY 


Fig. 2-36 WEP (64-bit) / WEP (128-bit) 
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Automatic Security Configuration 


Wi-Fi Protected Setup’ (WPS) is an easy and secure way of configuring and connecting your Wireless 
access point. In this case, the Wireless Gateway is the Access Point (AP), and Your PC (or Wireless Device) 
is called the STA. When configuring your Wireless Network via WPS, Messages are exchanged between the 
STA and AP in order to configure the Security Settings on both devices. 


@ WPS Configuration: It will help you to Enable or Disable the WPS feature. To enable you need to 
select WPS, to disable you need to select Disabled. 


Note: After you Enable the WPS you will get the options as show in Fig.2-36 and the WPS 
Configuration State box will show its configuration status. 


@ Device Name: By using this you can change the factory default to a name of your choice which is up to 
32 characters long as like SSID. 


WPS Setup AP: Here you do not need to change anything, just skip this step. 


WPS Add Client: There are two methods type “Client PIN” and “Authorized Client MAC”. Type in 
the client information you want. Then press button “add”. 


Automatic Security Configuration 


iwes _ lis 
WPS Config State: Configured 


The physical button on the AP will provision wireless 


clients using Wi-Fi Protected Setup (WPS) 
Device Name TechnicolorAP 


WPS Setup AP 
UUID:46374ffb270acdb22219ca4f576a9d30 


PIN: |67441785 Generate AP PIN 


WPS Add Client 


Add a client: 


Client PIN: 
Authorized Client MAC: 


Fig. 2-37 Automatic Security Configuration 
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If you type in Client PIN, then the WPS Add Client option will appear as shown below. 


WPS Add Client 


Add a client: 


Client PIN: 
Authorized Client MAC: 


Fig.2-38 WPS/Push-Button 


And then if you click “Add” button then WPS Add Client page will appear as shown in Fig.38 


WPS Add Client 


Your AP is now waiting for the STA to connect. 


WPS Configure Status: InProgress 


Fig.2-39 WPS Setup AP/PUSH 
And WPS Configure Status will be “In progress”, after establishing the connection the WPS 


Configure Status will be “Success!” as shown below. After successful connection the client will get IP 
address from AP and then internet will be accessible. 


WPS Add Client SUCCESSFUL 


Configuration is complete. Click 'Continue' to return to the previous page. 


WPS Configure Status: Success! 


Fig.2-40 WPS Setup AP successful/PUSH 


WPS Add Client process also can finish with type in Authorized Client MAC. 
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3. Access Control 


This page allows you to control device that can connect to the AP and list all connected clients. Control is 
made by Mac Address. 


technicolor 


Status - Network- Advanced - Firewall- Parental Control - Wireless 


a 


ae Wireless 


802.11 Access Control : This page allows configuration of the Access Control to the AP as well as status on 


Primary Network connected clients. 


» Access Control 


Advanced enieee 
istration _ 
eme | (Allow or deny access to Administration Web Page from PC connected over Wifi.) 
Bridging Web Page Access 
WMM 


MAC Restrict Mode [Disabled |¥] 
MAC Addresses 


No wireless clients are connected. 


Fig. 2-41 Wireless\Access Control 


@ Administration Web Page Access: This field let you decide if a PC connected over Wi-Fi to the 
Gateway can have access to the Gateway Web Pages. 


@ MAC Restrict Mode: Click Disabled to welcome all of the clients on the network; select Allow to 
permit only the clients on the list to access the cable modem; or choose Deny to prevent the clients on 
the list to access this device. 


@ MAC Address: Your Gateway identifies wireless PCs by their Wireless MAC Address. This address 
consists of a string of 6 pairs of numbers 0-9 and letters A-F, such as 00 90 4B FO FF 50. It is usually 
printed on the Wireless card of the device (e.g. the PCMCIA card in a laptop). 


@ Enter the MAC addresses of the connected clients into the fields, and then click Apply to add them to 
the list for access control. 


@ Apply: After proper configuration, click Apply to invoke the settings. 


Connected Clients: The information of currently connected clients will be displayed here. 
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4. Advanced 


This page allows you to configure some advanced settings. The factory default values should provide good 
results in most cases. We don’t recommend you change these settings unless you have technical knowledge 
of 802.11 wireless technology. 


For expert users, details of all settings on this web page are provided below. 


technicolor 


Status - Advanced - 


Wireless 
a 


Network - Firewall - Parental Control - 


r 


Wireless 
Radio ss 


802.11 Advanced : This page allows configuration of data rates and WiFi thresholds. 


Primary Network 


Access Control 


>» Advanced pa naare 


Xpress TM Technology 
802.11n Protection 
Short Guard Interval 
Basic Rate Set 


Bridging 
WMM 


Multicast Rate 
NPHY Rate 
Rate 

Beacon Interval 
DTIM Interval 


Fragmentation Threshold 


[Auto 


Disabled |v] 


Auto |¥| 
[Auto [¥] 


[Default |] 


=) 


Auto 


100 
1 
2346 


RTS Threshold |2347 


Fig. 2-42 Wireless\Advanced 


54g™ Mode: Except Auto mode, there are three modes for you choose, please check the specification of 
your wireless card and choose a proper setting. 


Basic Rate Set: The rates that for all clients want to associate with. Choose “Default” or “All” for the 
802.11 b/g/n. 


54g™ Protection: To improve the 802.11g performance in 802.11 mixed environments Default “Auto” 
is enabled. 
Xpress™ Technology: When Xpress is turned on, aggregate throughput (the sum of the individual 


throughput speeds of each client on the network) can improve by up to 27% in 802.11g-only networks, 
and up to 75% in mixed networks comprised of 802.11g and 802.11b standard equipment. 


Tecnologia Afterburner™: To enhancement for the 54g™ platform, It maximum performance 
implementation of the IEEE 802.11g standard. Products with this new technology provide up to 40 
percent greater throughput than typical standard 802.11g systems without impacting the performance of 
neighboring wireless LANs 


Rate: It decides the speed of data transmission. There are several rates provided here for you to choose. 
Choose any one of it according to your needs by using the drop-down menu. 
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Beacon Interval: Set the period of beacon transmissions to allow mobile stations to locate and identify 
a BSS. The measure unit is “time units” (TU) of 1024 microseconds. (Value range: 1~65535) 


DTIM Interval: The value you set here is used to inform mobile stations when multicast frames that 
have been buffered at the Wireless Gateway will be delivered and how often that delivery occurs. 
(Value range: 1~255) 


Fragmentation Threshold: Set the number of the fragmenting frames to make the data to be delivered 
without errors induced by the interference. Frames longer than the value you set here are fragmented 
before the initial transmission into fragments no longer than the value of the threshold. (Value range: 
256~ 2346) 


RTS Threshold: Set the value for sending a request to the destination. All the frames of a length 
greater than the threshold that you set here will be sent with the four-way frame exchange. And, a 
length less than or equal to the value that you set will not be proceeded by RTS. (Value range: 0~ 2347) 


NPHY Rate: Set the Physical Layer rate. The rate always set “Use Legacy Rate”. 


802.11n Protection: 
This method provides 802.11g and 802.11b devices can co-exist in the same network without 
“speaking” at the same time. Default “Auto” is enabled. 


Multicast Rate: The baseline levels that wireless device able to deliver in order to connect to the 
Wireless Gateway. Lower multicast rates mean weaker, farther signals are allowed to connection. 
Higher multicast rates mean that only close, strong signals are allowed. 
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5. Bridging 


The Bridging page provides a location where settings can be adjusted related to the WDS (Wireless 
Distribution System) feature. 


WDS is a system that enables the interconnection of access points wirelessly. It may also be referred to as 
repeater mode because it appears to bridge and accept wireless clients at the same time (unlike traditional 
bridging). 


The wireless gateway can be placed in a mode that allows the gateway to communicate with other 
“extender” wireless access points either exclusively or mixed with communications to local PCs. Use this 
page to designate the Remote Bridges the gateway is allowed to communicate with, and to select the 


Wireless Bridging mode. 
Status - Network- Advanced - Firewall- Parental Control - Wireless 
a 
vr 
— Wireless 


Bridging : This page allows configuration of WDS features. 
Primary Network 


Access Control 


mice Wireless Bridging |Disabled[¥] 


Remote Bridges 
> Bridging 


WMM 


Fig. 2-43 Wireless\Bridging 


@ Wireless Bridging: Choose “Disabled” to shutdown this function; select Enabled to turn on the 
function of WDS. 


@ Remote Bridges: Enter the MAC Addresses of the remote Bridges to relay the signals for each other. 
@ Apply: After proper configuration, click Apply to invoke the settings. 
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6. 802.11 Wi-Fi Multimedia: 


Wi-Fi Multimedia (WMM) is a component of the IEEE 802.1 le wireless LAN standard for quality of 
service (QoS). The QoS assigns priority to the selected network traffic and prevents packet collisions and 
delays thus improving VoIP calls and watching video over WLANs. 


technicolor . 


Status - Network- Advanced-  Firewall- Parental Control - Wireless 
yN 
a 


ae Wireless 


802.11 Wi-Fi Multimedia : This page allows configuration of the Wi-Fi Multimedia QoS. 
Primary Network 


Access Control 


WMM Support [on|[¥] 


Advanced — 
No-Acknowledgement | Off|¥ 
Bridging Power Save Support [On|¥| 
> WMM 
EDCA AP ; TXOP(b) Limit TXOP(a/g) Limit Discard Oldest 
Parameters: dia aaa ati (usec) (usec) First 
AC_BE 15 63 3 ft) ) Off | 
AC_BK |15 1023 Z 0 ) Off |i] 
AC_VI/7 15 1 6016 3008 [Off |v} 
AC_VO/|3 7 1 3264 1504 [Off |v] 
EDCA STA 
Parameters: 
AC_BE 15 1023 3 ft) ) 
AC_BK/15 1023 7 ) ) 
AC_VI/7 15 2 6016 3008 
AC_VO 3 7 2 3264 1504 
WMM TXOP Short Retry Short Fallbk Long Retry Long Fallbk limit Max Rate in 
Parameters: limit limit limit 500kbps 
AC_BE 7 3 4 2 ) 
AC_BK|7 3 4 2 ) 
AC_VI17 3 4 2 0 
AC_VO|7 3 4 2 0 


Fig.2-44 Wireless\WMM 
Enable WMM:: This field allows you to enable WMM to improve multimedia transmission. 
Enable WMM No-Acknowledgement: This field allows you to enable WMM No-Acknowledgement. 
Power Save Support: This field allows you to enable WMM Power-Save-Support. 


EDCA AP parameters: proposal : specifies the transmit parameter for traffic transmitted from the AP 
to the STA for the 4 Access Categories: Best effort (AC_BE), Background (AC_BK) Video (AC_VI) 
and voice (AC_VO). Transmit parameters include contention window (CWmin CWmax) , arbitration 
Inter Frame Spacing Number AIFSN, and Transmit opportunity Limit (TXOP limit ). Admission 
Control specifies if admission control is enforced for the Access categories. Discard Oldest first 
specified the discard policy for the queues , On discards the oldest first ; off discards the newest first. 
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@ EDCA STA parameters: proposal : specifies the transmit parameter for traffic transmitted from the 
STA to the AP for the 4 Access Categories :Best effort (AC_BE), Background (AC_BK) Video 


(AC_VJ) and voice AC_VO. Transmit parameters include contention window (CWmin CWmax) , 
arbitration Inter Frame Spacing Number AIFSN, and Transmit opportunity Limit (TXOP limit ). 


@ WMM TXOP parameters: proposal : specifies the transmit parameter for traffic transmitted from the 
TXOP to the AP for the 4 Access Categories :Best effort (AC_BE), Background (AC_BK) Video 
(AC_VJ) and voice(AC_VO). Transmit parameters include Short Retry Limit , Short Fallbk Limit , 
Long Retry Limit , Long Fallbk Limit , and Max Rate in 500kbps. 
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CHAPTER 3: NETWORKING 


Communications 


Data communication involves the flow of packets of data from one device to another. These devices include 
personal computers, Ethernet, cable modems, digital routers and switches, and highly integrated devices that 
combine functions, like the Wireless Cable Gateway. 


The gateway integrates the functionality often found in two separate devices into one. It’s both a cable 
modem and an intelligent wireless gateway networking device that can provide a host of networking features, 
such as NAT and firewall. Fig.3-1 illustrates this concept, with the cable modem (CM) functionality on the 
left, and networking functionality on the right. In this figure, the numbered arrows represent communication 
based on source and destination, as follows: 


Cable Modem Section Networking Section 


WAN CPE IP LAN 
IP Stack 2 


Connected to your PC via: 
# Ethernet 
802.11b/g/n 


[J] 


Cable service 


Fig.3-1 Communication between your PCs and the network side 


Type of Communication 


1. Communication between the Internet and your PCs 
Example: The packets created by your request for a page stored at a web site, and the contents of that 
page sent to your PC. 


2. Communication between your cable company and the cable modem side 
Example: When your cable modem starts up, it must initialize with the cable company, which requires the 
cable company to communicate directly with the cable modem itself. 


3. Communication between your PCs and the networking side 


Example: The Wireless Cable Gateway offers a number of built-in web pages which you can use to 
configure its networking side; when you communicate with the networking side, your communication is 
following this path. Each packet on the Internet addressed to a PC in your home travels from the Internet 
down- stream on the cable company’s system to the WAN side of your Wireless Cable Gateway. There it 
enters the Cable Modem section, which inspects the packet, and based on the results, proceeds to either 
forward or block the packet from proceeding on to the Networking section. Similarly, the Networking 
section then decides whether to forward or block the packet from proceeding on to your PC. Communication 
from your home device to an Internet device works similarly, but in reverse, with the packet traveling 
upstream on the cable system. 
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Cable Modem (CM) Section 
The cable modem (or CM) section of your gateway uses DOCSIS or EURO-DOCSIS Standard cable modem 


technology. DOCSIS or EURO-DOCSIS specifies that TCP/IP over Ethernet style data communication be 
used between the WAN interface of your cable modem and your cable company. 


A DOCSIS or EURO-DOCSIS modem, when connected to a Cable System equipped to support such 
modems, performs a fully automated initialization process that requires no user intervention. Part of this 
initialization configures the cable modem with a CM IP (Cable Modem Internet Protocol) address, as shown 
in Figure 3-2, so the cable company can communicate directly with the CM itself. 


Networking Section 


The Networking section of your gateway also uses TCP/IP (Transmission Control Protocol/ Internet Protocol) 
for the PCs you connected on the LAN side. TCP/IP is a networking protocol that provides communication 
across interconnected networks, between computers with diverse hardware architectures and various 
operating systems. 


TCP/IP requires that each communicating device be configured with one or more TCP/IP stacks, as 
illustrated by Fig.3-2. On a PC, you often use software that came with the PC or its network interface (if you 
purchased a network interface card separately) to perform this configuration. To communicate with the 
Internet, the stack must also be assigned an IP (Internet Protocol) address. 192.168.100.1 is an example of an 
IP address. A TCP/IP stack can be configured to get this IP address by various means, including a DHCP 
server, by you directly entering it, or sometimes by a PC generating one of its own. 


Ethernet requires that each TCP/IP stack on the Wireless Cable Gateway also have associated with it an 
Ethernet MAC (Media Access Control) address. MAC addresses are permanently fixed into network devices 
at the time of their manufacture. 00:90:64:12:B1:91 is an example of a MAC address. 


Data packets enter and exit a device through one of its network interfaces. The gateway offers Ethernet and 
802.11b/g/n wireless network interfaces on the LAN side and the DOCSIS network interface on the WAN 
side. 


When a packet enters a network interface, it is offered to all the TCP/IP stacks associated with the device 

side from which it entered. But only one stack can accept it — a stack whose configured Ethernet address 
matches the Ethernet destination address inside the packet. Furthermore, at a packet’s final destination, its 
destination IP address must also match the IP address of the stack. 


Each packet that enters a device contains source MAC and IP addresses telling where it came from, and 
destination MAC and IP addresses telling where it is going to. In addition, the packet contains all or part of a 
message destined for some application that is running on the destination device. IRC used in an Internet 
instant messaging program, HTTP used by a web browser, and FTP used by a file transfer program are all 
examples of applications. Inside the packet, these applications are designated by their port number. Port 80, 
the standard HTTP port, is an example of a port number. 


The Networking section of the router performs many elegant functions by recognizing different packet types 
based upon their contents, such as source and destination MAC address, IP address, and ports. 
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Three Networking Modes 


Your gateway can be configured to provide connectivity between your cable company and your home LAN 
in any one of three Networking Modes: CM, RG, and CH. This mode setting is under the control of your 
cable company, who can select the mode to match the level of home networking support for which you have 
subscribed. All units ship from the factory set for the RG mode, but a configuration file which the cable 
company sends the cable modem section during its initialization can change it. 


Cable Modem (CM) Mode 


Cable 
Operator 


CM Mode 


Wireless Voice Cable Gateway 
behaves as a bridge 


WAN 

RJ 45 as, 
Wireless — — 
Voice 
Cable 
GateWay 

CPE 1 CPE 2 
111.111.1.12 111.111.1.13 
Fig. 3-2 Cable Modem Mode 
CM/Networking 
IP Stack 2 
92.168.100.1 
WAN LAN 


Fig. 3-3 Two IP stacks are activated in cable modem mode 
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CM (Cable Modem) Mode provides basic home networking. In this mode, two IP stacks are active: 


IP Stack 1 - for use by the cable company to communicate with the cable modem section only. This stack 
receives its IP address from the cable company during CM initialization. It uses the MAC address printed 
on the label attached to the Wireless Cable gateway. 


IP Stack 2 - for use by you, the end user, to communicate with the cable modem and Networking 
sections, to access the internal web page diagnostics and configuration. This stack uses a fixed IP address: 
192.168.100.1. It uses a MAC address 00:10:95:FF:FF:FE. 


With CM Mode, your cable company must provide one IP address for the CM section, plus one for each PC 
you connect from their pool of available addresses. Your cable company may have you or your installer 

manually enter these assigned addresses into your PC, or use a DHCP Server to communicate them to your 
PCs, or use a method that involves you entering host names into your PCs. 


Note that in CM Mode, packets passing to the Internet to/from your PCs do not travel through any of the IP 
stacks; instead they are directly bridged between the WAN and LAN sides. 


Residential Gateway (RG) Mode 


Cable 
Operator 


RG & CH Modes 
Wireless Voice Cable Gateway 


WAN behaves as a gateway 


Wireless 


Voice 
Cable 
GateWay 
CPE 1 CPE 2 
192.168.0.10 192.168.0.11 


Fig. 3-4 Residential Gateway Mode 
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om 
IP Stack 5 
192.168.0.1 


WAN 


Fig. 3-5 Three IP stacks are activated in cable modem mode 


RG (Residential Gateway) Mode provides basic home networking plus NAT (Network Address Translation). 
In this mode, three IP stacks are active: 


IP Stack 1 - for use by the cable company to communicate with the Cable Modem section only. This 
stack receives its IP address from the cable company during CM initialization. It uses the MAC address 
printed on the label attached to the Wireless Cable Gateway. 


IP Stack 3 - for use by you to remotely (i.e. from somewhere on the WAN side, such as at your remote 
workplace) communicate with the Cable Modem and Networking sections, to remotely access the 
internal web page diagnostics and configuration. This stack is also used by your cable company to 

deliver packets between the Internet and the gateway’s networking section so they can be routed to/from 
your PCs. This stack requires an IP address assigned by the cable company from their pool of available 
addresses. Your cable company may have you or your installer manually enter assigned addresses into 
your gateway, or use a DHCP Server to communicate them, or use a method that involves you entering 
host names. This stack uses a MAC address of MAC label + 2 (the MAC label is found on the bottom of 
the unit). E.g., if the MAC address is 00:90:64:12:B1:91, this MAC address would be 00:90:64:12:B1:93. 


IP Stack 5 - for use by you to locally (1.e. from somewhere on the LAN side in your home) communicate 
with the Cable Modem and Networking sections, to access the internal web page diagnostics and 
configuration. This stack is also used by the gateway’s networking section to route packets between the 
gateway’s Networking section and your PCs. This stack uses a fixed IP address: 192.168.0.1. It uses a 
MAC address of MAC label + 4 (the MAC label is found on the bottom of the unit). E.g., if the MAC 
address is 00:90:64:12:B1:91, this MAC address would be 00:90:64:12:B1:95. 


With RG Mode, your cable company must provide one IP address for the CM section, plus one for the 
Networking section, from their pool of available addresses. With RG Mode, each PC you connect gets an IP 
address from a DHCP Server that is part of the Networking section of the gateway. 
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CHAPTER 4: ADDITIONAL INFORMATION 


Frequently Asked Questions 
Q. How do I get the system installed? 


A. Professional installation from your cable provider is strongly recommended. They will ensure proper 
cable connection to the modem and your computer. However, your retailer may have offered a self 
installation kit, including the necessary software to communicate with your cable ISP. 


Q. Once my Wireless Gateway is connected, how do I get access to the Internet? 


A. Your local cable company provides your internet service*, offering a wide range of services including 
email, chat, and news and information services, and a connection to the World Wide Web. 


Q. It seems that the wireless network is not working 


A. Check the Wireless LED on the front panel. If it is no lighted, press on the WPS button shortly, less than 
1 second, on the side of the modem, and then check again the Wireless LED. If it is lighted, then the 
Wireless transmission is enabled. 


Q. Can I watch TV, surf the Internet, and talk to my friends through the Wireless Gateway at the same 
time? 

A. Absolutely! 

Q. What do you mean by “Broadband?” 

A. Simply put, it means you'll be getting information through a “bigger pipe,” with more bandwidth, than a 
standard phone line can offer. A wider, “broader” band means more information, more quickly. 


Q. What is DOCSIS and what does it mean? 


A. “Data over Cable Service Interface Specifications” is the industry standard that most cable companies are 
adopting as they upgrade their systems. Should you ever decide to move, the Wireless Gateway will work 
with all upgraded cable systems that are DOCSIS-compliant. 


Q. What is Xpress Technology and what does it mean? 


A. It is one of the popular performance-enhancing WiFi technologies, designed to improve wireless network 
efficiency and boost throughput. It is more efficient in mixed environments, and it can work with 
802.11b/g/n networks. When Xpress is turned on, aggregate throughput (the sum of the individual 
throughput speeds of each client on the network) can improve by up to 27% in 802.11g-only networks, 
and up to 75% in mixed networks comprised of 802.11g and 802.11b standard equipment. The 
technology achieves higher throughput by re-packaging data, reducing the number of overhead control 
packets, so that more useful data can be sent during a given amount of time. 


* Monthly subscription fee applies. 


** Additional equipment required. Contact your cable company and ISP for any restrictions or additional fees. 
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General Troubleshooting 


You can correct most problems you have with your product by consulting the troubleshooting list that 
follows. 


I can’t access the internet. 
@ Check all of the connections to your Wireless Gateway. 
@ Your Ethernet card may not be working. Check each product’s documentation for more information. 


@ The Network Properties of your operating system may not be installed correctly or the settings may be 
incorrect. Check with your ISP or cable company. 


I can’t get the modem to establish an Ethernet connection. 


@ Even new computers don’t always have Ethernet capabilities — be sure to verify that your computer has 
a properly installed Ethernet card and the driver software to support it. 


@ Check to see that you are using the right type of Ethernet cable. 
The modem won’t register a cable connection. 


@ If the modem is in Initialization Mode, the INTERNET light will be flashing. Call your Cable Company 
if it has not completed this 5-step process within 30 minutes, and note which step it is getting stuck on. 


@ The modem should work with a standard RG-6 coaxial cable, but if you’re using a cable other than the 
one your Cable Company recommends, or if the terminal connections are loose, it may not work. Check 
with your Cable Company to determine whether you’re using the correct cable. 


@ If you subscribe to video service over cable, the cable signal may not be reaching the modem. Confirm 
that good quality cable television pictures are available to the coaxial connector you are using by 
connecting a television to it. If your cable outlet is “dead”, call your Cable Company. 


@ Verify that the Cable Modem service is DOCSIS compliant by calling your cable provider. 


For more Usage and Troubleshooting Tips use the web site links provided on the CD-ROM: 


www.technicolor.com 
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Service Information 


If you purchased or leased your Wireless Gateway directly from your cable company, then warranty service 
for the Digital Cable Modem may be provided through your cable provider or its authorized representative. 
For information on 1) Ordering Service, 2) Obtaining Customer Support, or 3) Additional Service 
Information, please contact your cable company. If you purchased your Wireless Gateway from a retailer, 
see the enclosed warranty card. 
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Glossary 


10/100/1000 BaseT — Unshielded, twisted pair cable with an RJ-45 connector, used with Ethernet LAN 
(Local Area Network). “10/100/1000” indicates speed (10/100/1000 BaseT), “Base” refers to baseband 
technology, and “T” means twisted pair cable. 


Authentication - The process of verifying the identity of an entity on a network. 


DHCP (Dynamic Host Control Protocol) — A protocol which allows a server to dynamically assign IP 
addresses to workstations on the fly. 


Ethernet adapters — A plug-in circuit board installed in an expansion slot of a personal computer. The 
Ethernet card (sometimes called a Network Interface Card , network adapter or NIC) takes parallel data from 
the computer, converts it to serial data, puts it into a packet format, and sends it over the 10/100/1000 BaseT 
LAN cable. 


DOCSIS (Data Over Cable Service Interface Specifications) — A project with the objective of developing 
a set of necessary specifications and operations support interface specifications for Cable Modems and 
associated equipment. 


F Connector — A type of coaxial connector, labeled CABLE IN on the rear of the Wireless Gateway that 
connects the modem to the cable system. 


HTTP (HyperText Transfer Protocol) — Invisible to the user, HTTP is used by servers and clients to 
communicate and display information on a client browser. 


Hub — A device used to connect multiple computers to the Wireless Gateway. 


IP Address — A unique, 32-bit address assigned to every device in a network. An IP (Internet Protocol) 
address has two parts: a network address and a host address. This modem receives a new IP address from 
your cable operator via DHCP each time it goes through Initialization Mode. 


Key exchange - The swapping of mathematical values between entities on a network in order to allow 
encrypted communication between them. 


MAC Address — The permanent “identity” for a device programmed into the Media Access Control layer in 
the network architecture during the modem’s manufacture. 


Provisioning - The process of enabling the Media Terminal Adapter (MTA) to register and provide services 
over the network. 


TCP/IP (Transmission Control Protocol/Internet Protocol) — A networking protocol that provides 
communication across interconnected networks, between computers with diverse hardware architectures and 
various operating systems. 


TFTP - Trivial File Transfer Protocol, the system by which the Media Terminal Adapter’s configuration 
data file is downloaded. 


Xpress Technology - One of the popular performance-enhancing WiFi technologies, designed to improve 
wireless network efficiency and boost throughput. It is more efficient in mixed environments, and it can 
work with 802.11b/g/n networks. 
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